Transformation Lab Privacy Policy

Last updated: April 6, 2026

Introduction

Transformation Lab ("we", "our", or "the app") is a body transformation tracking application. This privacy policy explains how we collect, use, and protect your personal information.

Information We Collect

• Account Information: Email address and user ID through Firebase Authentication (including Google Sign-In).
• Health & Fitness Data: Weight, body fat percentage, and workout information that you manually enter or sync from connected services (Hevy, Oura, WHOOP).
• Photos: Progress photos you take or select from your device. Photos are stored locally on your device in the app's private storage directory.
• Integration API Keys: If you connect third-party services (Hevy, Oura, WHOOP), your API keys are stored securely on your device using encrypted storage.

How We Use Your Information

• To provide and maintain the app's core functionality (tracking your transformation journey).
• To authenticate your account and sync your data across sessions.
• To display your progress over time through charts, photos, and statistics.

Data Storage & Security

• Your transformation data is stored in Google Firebase Firestore, secured with per-user access rules so only you can access your own data.
• Photos are stored locally on your device and are not uploaded to any server.
• API keys for third-party integrations are stored in your device's secure/encrypted storage.
• We use Firebase Authentication for secure sign-in.

Third-Party Services

The app integrates with the following optional third-party services at your discretion:

• Google Firebase (authentication and data storage)
• Hevy (workout data sync)
• Oura (sleep and readiness data sync)
• WHOOP (recovery and strain data sync)
• Apple HealthKit (health data sync, iOS only)

Each third-party service has its own privacy policy. We encourage you to review them.

Data Sharing

We do not sell, trade, or share your personal data with any third parties for advertising or marketing purposes. Your data is only transmitted to Firebase for storage and to third-party fitness services you explicitly connect.

Data Retention & Deletion

Your data is retained as long as you have an active account. You can delete your account and all associated data by contacting us at the email below. Photos stored on your device can be removed by deleting them within the app or uninstalling the app.

Children's Privacy

Transformation Lab is not intended for children under 17. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected by the "Last updated" date at the top of this page.

Contact Us

If you have questions about this privacy policy, please contact us at:
gamer.verdian@gmail.com